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I claim: 

1) A security systAn for a computer connected to a network of computers comprising: 

at least one security subsystem associated with said computer, said subsystem 
configured to detectWacks on said computer; 

and a secure limk between said security subsystem and a master system enabling 
data communication therebetween; wherein 

said master system monitors said security subsystem through said secure link and 
registers information peiaaining to attacks detected by said security subsystem. 

2) The security system of alaim 1 further comprising a pseudo attack generator 
associated with said masterlsystem for generating attacks on said computer detectable by 
said security subsystem wherein said master system monitors said security subsystem by 
comparing said pseudo-attaqks to said attacks detected by the security subsystem. 


3) The security system of Claim 1 wherein said master system is hierarchically 
independent from said security subsystem. 


1 wherein said security subsystem is hierarchically 
em. 


4) The security system of Claam 
subordinate to said master sys 

5) A network security system for a target network of computers comprising: 
at le^t one security subsystem associated with said target network, said 

subsystem configured to detect attacks on said network; and 

a secure iVik between said security subsystem and a master system enabling data 
communication therebetween; wherein 

said master system monitors said security subsystem through said secure link and 
registers informationpertaining to the attacks detected by said security subsystem. 
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6) The network! security system of Claim 5 wherein said master system is hierarchically 
independent from said security subsystem. 

7) The network Security system of Claim 5 wherein said security subsystem is 
hierarchically subordinate to said master system. 

8) A network seoirity system for a target network of computers comprising: 

at least ona security subsystem associated with said target network and 
configured to deteit and register attacks on said target network; 

a secure linlafor data communication between said security subsystem and said 
master system; and \ 

testing meanspssociated with said master system for generating pseudo-attacks 
on said target network initiated by said master system and detectable by said security 
subsystem; wherein I 

said master sysiem monitors said security subsystem through said secure link by 
comparing the pseudo^ttacks generated by said testing means to the detected attacks 
registered by said secu^ty subsystem. 

system of Claim 8 wherein said master system is hierarchically 
:curity subsystem. 

system of Claim 8 wherein said security subsystem is 
to said master system. 

11) A methdd for monitoring the integrity of a security subsystem associated with a 
target netwolk of computers and configured to detect attacks on said network of 
computers comprising: 


9) The network securit 
independent from said s\ 


10) The network securit 
hierarchically subordinati 
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5 establisn^ng a secure link for the transfer of data between said security subsystem 

and a master system hierarchically independent from said security subsystem; 

monitoring me status of said security subsystem through said secure link; and 
registering inrarmation pertaining to the status of said security subsystem. 

10 12) The method for mofiitoring the integrity of a security system of Claim 11 including 
the steps of: 

connecting said n\aster system and said target network separately to an open 
network of computers; 

generating at least Ipne pseudo-attack in said master system, said pseudo attack 
being detectable by said security subsystem; 
"J generating in said master system a list of expected responses to said at least one 

O pseudo-attack; 

nl delivering said at lea^ one pseudo-attack over said open network to said target 

network; and 

□0 comparing the response of said security subsystem to said pseudo-attack to the list 

k I of expected responses thereto 
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